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(57) Abstract: Computers connected to a private network are monitored and controlled through the use of a client agent (230) that 
operates in association with the computer (200) and a server client that establishes security parameters, privileges, and authorizations 
for the computer The invention can prevent access to certain devices according to an active security policy. Any activity of the 
computer (200), such as a request to transfer data to an external device, access a particular file, etc. is monitored and controlled by 
the client agent (230). No operations or procedures are allowed by the computer (200) inconsistent with the active security policy. 
The security policy may be set by the administrator of the private network according to the user rights and position in the organization. 
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